Telegram, the widely used messaging app, has initiated a scheme offering complimentary premium memberships to users who opt for a feature posing potential privacy risks.
If users consent to allowing Telegram to utilize their phones as SMS OTP relays, the app grants them a free premium membership.
This feature was first identified by reverse engineer Assemble Debug and has been observed in various regions on Android devices.
Essentially, users can employ their phones as relays for dispatching SMS OTPs to other Telegram users attempting to log into their accounts.
Users will incur regular SMS charges, likely exceeding the value of a Telegram Premium membership. Telegram intends to dispatch a maximum of 150 SMS OTPs through user smartphones monthly, only rewarding Premium to those who meet a specific quota of SMS texts.
This development raises significant privacy concerns as it could expose personal phone numbers to strangers, potentially leading to spam or fraud.
Although Telegram offers a feature to conceal phone numbers from strangers, utilizing a phone as an SMS relay may inadvertently reveal user contact details through a Telegram account.
Furthermore, Telegram will not assume responsibility for any user damage resulting from this feature, as outlined in its terms.
Consequently, Telegram will be immune to user claims of damage related to peer-to-peer login.
While Telegram advises users to refrain from engaging with individuals who receive an OTP code from their phone number, there is currently no mechanism in place to enforce this guidance.
